crates.io/websocket CVE-2022-35922: unknown, EPSS 1.92%

Unbounded memory allocation based on untrusted length

Action: Upgrade websocket to 0.26.5 or later.

cargo update -p websocket --precise 0.26.5

Affected

Fixed versions

Sources

• osv: RUSTSEC-2022-0035
• https://crates.io/crates/websocket
• https://rustsec.org/advisories/RUSTSEC-2022-0035.html
• https://github.com/websockets-rs/rust-websocket/commit/cbf6e9983e839d2ecad86de8cd1b3f20ed43390b

CVE-2022-35922 · published 2022-08-01T12:00:00Z · modified 2026-10-12T18:00:06.812726782Z · JSON